Privacy

Vir is built so your fishing data stays yours.

You don't need an account, Vir creates no user profile, and it doesn't keep your fishing diary on its servers. Catches, photos, private spots, gear and stats are stored locally on your phone.

The app still has to talk to a few internet services for features like the forecast, maps, river levels and Premium to work. Below is exactly what is sent, to whom and why.

In short

Who is the data controller

The controller of personal data within the meaning of the Personal Data Protection Act of the Republic of Serbia is Miša Cvetković, Serbia. Where European Union law applies, Vir applies the corresponding obligations under the GDPR. For any privacy question, write to .

Your data stays on your phone

Vir has no user database. Everything you enter — catches with photos and notes, your private places, gear, stats and settings — is written to the app's local storage on your phone. Vir makes no cloud copy, so there is no sync between devices either. On Android the app is excluded from the phone's automatic backup; on iPhone your iCloud backup may include its data — that backup is yours to control, not ours.

The app uses the camera and photo library only when you add a photo of a catch or a spot yourself. Photos never leave your phone. The exception is when you share a catch card or export a backup yourself — then you send them to the app you choose in the system share menu.

What Vir can't see

Vir has no access to your fishing diary. We can't see your catches, photos, private spots, gear or stats — that data is stored locally on your device and never reaches us.

Vir doesn't use your data for profiling or advertising, and doesn't sell it to third parties.

What Vir sends to the internet

Vir connects to the internet to refresh the forecast, river levels, maps, spot data and photos and the place name, and to check your Premium status with the RevenueCat service (described below). These are the requests:

There are no analytics tools or advertising SDKs in the app. Vir doesn't read the phone's advertising identifier and builds no profile about you. The "Navigiraj" button and external links (fishery-authority sites, OpenStreetMap, our own site) open another app or the browser — from that point their rules apply. "Navigiraj" passes the spot's coordinates to the maps app, not your location.

Vir Premium

Vir Premium is paid through Google Play (the App Store once the app reaches iOS). Vir never sees your payment details — cards and receipts are handled exclusively by the store.

Purchases are verified by the RevenueCat service. When the phone is online, the app checks your Premium status with RevenueCat at launch and when it returns to the foreground — this applies to every user, with or without a purchase; offline it uses the last status stored on the phone and sends nothing. RevenueCat receives a random App User ID (RevenueCat calls it “anonymous”, we call it pseudonymous) that its SDK generates and stores on the phone — after deleting or reinstalling the app a new one is created —, the device type and operating system, the app version, the time of last use and the store's purchase confirmation if there is one; like any server, it also sees an IP address. Vir does not pass your name, email, photos, catches or any other fishing-diary data to RevenueCat. Everything else RevenueCat processes is described in its privacy policy.

Location

Vir uses the location permission only while the app is open — for nearby spots, conditions at your position and a point on the map. Location is not tracked in the background and Vir doesn't keep it on its server. When a forecast or a place name is needed, the coordinates are sent to the relevant service, as described above. While the map is open and following you as you move, the map service receives requests for the map areas the app needs, not your GPS coordinates.

You can refuse the permission — the app works without it, you just pick the place yourself.

Deleting your data

When you delete the app, all your data on the phone is deleted with it. We hold no copy at all, so we can't restore anything either — if your diary matters to you, back up your phone before deleting. The Premium backup sends nothing to a Vir server: the app creates a single file (catches with their locations, gear, spots, badges, profile and photos, unencrypted), and you choose where to save it or which app to hand it to.

The virfishing.app website

This website uses no tracking cookies. The language you pick with the switch in the header is stored locally in your browser and never sent to the server. There are no analytics, no advertising pixels and no third-party scripts on the site; even the fonts are served from our own server.

The site is hosted by Hostinger. The hosting provider may process technical data about access to the server — IP address, time of access, requested page and browser details — to run and secure its infrastructure. How long those records are kept depends on the hosting infrastructure configuration and the hosting provider's rules. We don't combine those logs with anything and don't use them to identify you. The site's forms also keep a hash of your IP address for at most an hour, only to stop bulk submissions.

Forms on the site

The forms on the site — the launch notification and the spot suggestion — send what you enter to our address . We use your email address only for the purpose you entered it for: one email when the app is out, or a reply to your suggestion. We don't pass it on to anyone and don't add it to any marketing list. Whenever you want it deleted, write to the same address.

Legal basis and retention periods

Forecast, map, river-level and place-name requests are processed because they are necessary for the feature you asked for; purchase data at RevenueCat — when you have an active purchase or subscription — because it is necessary to perform that contract, and the pseudonymous Premium status check on every install on the basis of our legitimate interest in the app reliably establishing the right to Premium features and preventing errors and abuse, with the least data that requires; the site's technical logs on the basis of our legitimate interest in keeping the site running and secure; what you voluntarily send through the forms only to answer your request or to send the notification you asked for — the launch notification on the basis of your consent, which you can withdraw at any time, and a spot suggestion because you started that correspondence yourself.

None of it is kept longer than needed: notification addresses are kept until the announced notification is sent and then deleted, unless a legal obligation or another justified reason requires keeping them longer; suggestion messages are deleted once the suggestion is handled, and the hosting provider keeps the site's access records for as long as its rules and infrastructure configuration provide. Data in the app stays on your phone until you delete it yourself.

Data transfers outside Serbia

Some of the services the app and the site use are outside Serbia: MET Norway in Norway (European Economic Area), RevenueCat in the USA (it stores data on AWS servers in the United States; we have a data processing agreement with it that includes the EU standard contractual clauses for EU data), the device's system geocoder (Google on Android phones with Google services, Apple on iPhone), OpenFreeMap for maps, and Hostinger for the site and the mailbox behind the forms — it processes data in the European Union and the United Kingdom and, where needed, in other countries, under its own privacy policy. Vir sends each of them only what is described above, and only for that purpose.

Your rights

Besides what you send us through the forms, in connection with Premium RevenueCat processes on our behalf the pseudonymous data described in the Vir Premium section. For all of it you have the right of access, rectification, erasure, restriction, portability (where applicable) and objection, and the right to withdraw consent. Writing to the address above is enough; we respond within the deadlines set by the applicable regulations. On request we also delete your record at RevenueCat — that removes the purchase history held there, but does not cancel the subscription in the store; you cancel that in your Google Play or App Store account settings. Data in the app we cannot even see — you delete it yourself, in the app or by deleting the app.

If you believe we process your data improperly, you can complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) or, if you are in the European Union, to your country's supervisory authority.